Update Mac build signing

Author: CryptAxe

.github/workflows/build.yml

@@ -52,6 +52,29 @@ jobs:
         if: matrix.os == 'macos-latest'
         run: |
           echo ${{ secrets.GODOT_MACOS_NOTARIZATION_API_KEY }} | base64 --decode > notarization_api_key.p8
+          
+          # Create build directory and add entitlements file
+          mkdir -p build
+          cat > build/entitlements.mac.plist << 'EOL'
+          <?xml version="1.0" encoding="UTF-8"?>
+          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+          <plist version="1.0">
+            <dict>
+              <key>com.apple.security.cs.allow-jit</key>
+              <true/>
+              <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+              <true/>
+              <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+              <true/>
+              <key>com.apple.security.cs.disable-library-validation</key>
+              <true/>
+              <key>com.apple.security.inherit</key>
+              <true/>
+              <key>com.apple.security.automation.apple-events</key>
+              <true/>
+            </dict>
+          </plist>
+          EOL
 
       - name: Build Electron app
         if: matrix.os != 'ubuntu-latest-large'

package.json

@@ -145,11 +145,9 @@
       "icon": "public/icon.icns",
       "hardenedRuntime": true,
       "gatekeeperAssess": false,
-      "entitlements": "build/entitlements.mac.plist",
-      "entitlementsInherit": "build/entitlements.mac.plist",
-      "notarize": {
-        "teamId": "APPLE_TEAM_ID"
-      }
+      "entitlements": "./build/entitlements.mac.plist",
+      "entitlementsInherit": "./build/entitlements.mac.plist",
+      "notarize": true
     }
   },
   "devDependencies": {